ASR

Microsoft Defender on a blue swirly background

Microsoft script recreates shortcuts deleted by bad Defender ASR rule

Microsoft released Advanced Hunting Queries (AHQs) and a PowerShell script to find and restore some Windows app shortcuts that were deleted Friday morning by the bug-bearing Microsoft Defender ASR database. Early in the morning of January 13, Microsoft released a new Microsoft Defender signature update that included a change to the Attack Surface Reduction (ASR) …

Microsoft script recreates shortcuts deleted by bad Defender ASR rule Read More »

Microsoft Defender

Buggy rule Microsoft Defender ASR deletes Windows app shortcuts

Microsoft has addressed a false positive resulting from a bugged Microsoft Defender ASR rule that would delete application shortcuts from the desktop, Start menu, and taskbar, and in some cases render existing shortcuts unusable since they cannot be used to launch associated applications. The issue affected application shortcuts across managed devices after a Microsoft Defender …

Buggy rule Microsoft Defender ASR deletes Windows app shortcuts Read More »